CycloneDX / CycloneDX/cyclonedx-cli
Add support for component integrity checks
Open
enhancement
- Dominant language
- C#
- Stars
- 541
- Forks
- 82
- PR merge metrics
- No merged PRs in 30d
Description
When a component has been included with hashes it would be great to be able to report on component hashes compared to publicly available component hashes. i.e. a component with a nuget package url could compare the recorded hash to what is reported by nuget.org
Contributor guide
Assessment
This issue has not been assessed yet.